pl777 Casino – Privacy Policy

pl777 Casino ("pl777," "we," "our," or "us") is committed to protecting the privacy and personal data of every Filipino player who accesses our platform at pl777.vip. This Privacy Policy describes our practices regarding the collection, processing, use, storage, and disclosure of personal information in connection with your use of the pl777 Casino website, mobile interface, and associated services.

By registering an account at pl777 Casino or by continuing to use the platform after this Policy has been published or updated, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal information as described herein. If you do not agree to this Privacy Policy, you must not register for or continue to use pl777 Casino services.

For the purposes of the Data Privacy Act of 2012, pl777 Casino is the personal information controller ("PIC") responsible for your personal data collected through the pl777.vip platform. pl777 Casino determines the purposes and means of processing personal information submitted by registered players, website visitors, and support inquiry senders.

pl777 Casino has designated a Data Protection Officer ("DPO") as required by the Data Privacy Act. For all data privacy matters, including requests to exercise your data subject rights, please contact our DPO at: [email protected] (plain text — not a clickable link).

pl777 Casino collects personal information from you in the following categories and through the following means:

3.1 Information You Provide Directly

3.2 Information Collected Automatically

• Device identifiers (device type, operating system, browser type and version)
• IP address and approximate geolocation (province/region level) for fraud prevention and regulatory compliance
• Session data including login timestamps, pages visited, game sessions initiated, wagers placed, and session duration
• Cookie identifiers and similar tracking technology data (see Section 7)
• Network and connectivity information relevant to service delivery

3.3 Information from Third Parties

In fulfilling AML obligations and KYC verification, pl777 may receive identity verification data from authorized third-party verification service providers. pl777 may also receive limited transactional confirmation data from GCash, Maya, and bank payment processors in connection with deposit and withdrawal processing.

pl777 Casino processes your personal information for the following purposes:

• Account creation and management: To register your pl777 account, authenticate your identity at login, maintain account records, and process account-level requests such as password resets and limit changes.
• Service delivery: To provide access to casino games, process wagers, calculate and credit winnings, and deliver the complete pl777 platform experience.
• Payment processing: To facilitate GCash and Maya deposits, bank transfers, and withdrawals; to verify payment source consistency for AML compliance.
• Identity verification (KYC): To verify that you meet the age requirement (21+), are a Philippine resident, and are not a politically exposed person or subject to sanctions, as required by PAGCOR and Philippine AML law.
• Regulatory compliance: To meet obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act, and the Data Privacy Act of 2012.
• Fraud prevention and platform security: To detect and prevent unauthorized account access, bonus abuse, identity fraud, payment fraud, and other prohibited conduct defined in the pl777 Terms and Conditions.
• Customer support: To respond to your inquiries, resolve disputes, and maintain support records.
• Responsible gaming: To implement and enforce deposit limits, self-exclusion requests, and session monitoring tools as required by PAGCOR.
• Platform improvement: To analyze aggregated usage data for the purpose of improving game offerings, platform performance, and user experience — always in anonymized or pseudonymized form.
• Marketing communications (with consent): To send promotional offers, bonus notifications, and platform updates to players who have opted in to receiving such communications via SMS.

pl777 Casino processes personal information on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfill our obligations under the pl777 Terms and Conditions, including account management, game provision, and payment processing.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act, KYC requirements, and other applicable Philippine law.
• Legitimate interest: Processing for fraud prevention, platform security, and aggregated analytics — where such interests are not overridden by the player's data protection rights.
• Consent: Processing for direct marketing communications, where you have given explicit, informed, and freely given consent at registration or subsequently.

pl777 Casino does not sell, rent, or trade your personal information to third parties for their own commercial purposes. We share personal data only in the following limited circumstances:

• Payment processors: GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, and other payment partners receive transactional data strictly necessary to process deposits and withdrawals.
• KYC/Identity verification providers: Third-party verification services receive identity data for the sole purpose of age and identity verification. These providers are bound by data processing agreements that prohibit secondary use.
• Game content providers: Licensed game studios and platform providers (e.g., JILI, PG Soft, Pragmatic Play) may receive anonymized session identifiers necessary for game functionality. No personally identifiable information is shared with game providers beyond what is technically required.
• PAGCOR and regulatory authorities: pl777 Casino is required by its operating license to disclose certain player and transaction data to PAGCOR upon request. Disclosures to Philippine law enforcement agencies are made in accordance with applicable legal process.
• Anti-Money Laundering Council (AMLC): Suspicious transactions are reported to the AMLC as required by Republic Act No. 9160 (AMLA) and its amendments.
• Professional advisers: Legal counsel, auditors, and compliance consultants who are bound by confidentiality obligations may access personal data in the course of their professional services to pl777.

All third parties who process personal data on pl777's behalf are contractually required to process such data only for specified purposes, to maintain appropriate security standards, and to comply with the Data Privacy Act of 2012.

pl777.vip uses cookies and similar tracking technologies to operate the platform, maintain session state, and analyze usage patterns. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function — session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking the service.
• Functional cookies: Store your preferences such as language settings and game display options to improve your experience on return visits.
• Analytics cookies: Anonymized usage data collected to understand how players interact with the pl777 platform, which game categories are most visited, and where technical issues occur. This data is used only in aggregated form for platform improvement.
• Security cookies: Used for fraud detection and to identify unusual access patterns that may indicate account compromise or automated bot activity.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to access and use the pl777 Casino platform.

pl777 Casino implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and pl777 servers
• Hashed and salted storage of passwords — pl777 staff cannot retrieve your plaintext password under any circumstances
• Access controls limiting internal access to personal data to authorized personnel on a need-to-know basis
• Regular security assessments and vulnerability testing of the pl777 platform infrastructure
• OTP-based two-factor authentication for new device logins and high-value withdrawal requests
• Encrypted storage of KYC documents with restricted access logging

In the event of a personal data breach that is likely to result in risk to your rights and freedoms, pl777 Casino will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players as required by NPC Circular No. 16-03.

pl777 Casino retains personal data for as long as necessary to fulfill the purposes for which it was collected, and for such additional period as is required or permitted by applicable Philippine law:

• Account and transaction records: Retained for a minimum of five (5) years from account closure, as required by the Anti-Money Laundering Act.
• KYC identity documents: Retained for a minimum of five (5) years following the end of the business relationship, per PAGCOR and AMLC requirements.
• Support communications: Retained for two (2) years from the date of the interaction, or longer if the subject matter relates to an ongoing dispute or regulatory investigation.
• Marketing consent records: Retained for the duration of the marketing relationship and for one (1) year thereafter as evidence of consent.
• Security and access logs: Retained for twelve (12) months for fraud detection and incident response purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in a manner that prevents re-identification.

As a data subject under the Data Privacy Act of 2012 (RA 10173), Filipino players have the following rights with respect to their personal data held by pl777 Casino:

• Right to be informed: The right to be notified of how your personal data is collected, used, and retained — which this Privacy Policy fulfills.
• Right of access: The right to obtain confirmation of whether pl777 holds personal data about you and to receive a copy of such data.
• Right to rectification: The right to have inaccurate or incomplete personal data corrected or updated.
• Right to erasure / right to be forgotten: The right to request deletion of your personal data in circumstances where continued processing is no longer legally justified — subject to pl777's retention obligations under AMLA and PAGCOR regulations.
• Right to object: The right to object to processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact pl777's Data Protection Officer at [email protected] (plain text — not a clickable link) with the subject line "Data Privacy Request." pl777 will respond to all data subject requests within fifteen (15) calendar days of receipt.

pl777 Casino services are strictly prohibited for individuals under the age of twenty-one (21), in accordance with PAGCOR regulations and Philippine gaming law. pl777 does not knowingly collect personal information from persons under 21 years of age. If pl777 becomes aware that personal data has been collected from a person under the age of 21, such data will be immediately deleted and the associated account closed. Parents or guardians who believe that a minor has registered at pl777 should contact support immediately via live chat.

The pl777.vip website does not contain links to third-party websites. However, game content provided by licensed third-party studios may be served from external domains. pl777 Casino is not responsible for the privacy practices or data handling policies of third-party game content providers. pl777 limits the personal data shared with game providers to technical session identifiers only, as described in Section 6.

pl777 Casino reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Where changes are material, registered players will be notified via SMS or in-platform notification no less than seven (7) days before the revised policy takes effect. The "Last Updated" date at the top of this document will reflect the most recent revision. Continued use of the pl777 platform after the effective date of any revision constitutes acceptance of the updated Privacy Policy.

For all privacy-related inquiries, data subject rights requests, or complaints regarding pl777 Casino's handling of your personal data, please contact our Data Protection Officer through the following channels:

• Live Chat: Available 24/7 via the pl777.vip platform. Request to speak with the DPO or submit a "Data Privacy Request."
• Email: [email protected] — Subject line: "Data Privacy Request" (plain text only; allow up to 15 business days for formal data subject rights requests)

If you are not satisfied with pl777's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines through its official website and complaint channels.